Privacy Policy
Last Updated: May 7, 2025
Wicare New Zealand Limited ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by InexTrack.
This Privacy Policy applies to our mobile application InexTrack, and its associated services (collectively, our "Service"). By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy.
1. Information We Collect
We collect information to provide and improve our Service to you. The types of information we collect include:
1.1. Information You Provide to Us
Account Information: When you create or modify your account, we collect your email address. If you sign in using Google, we may also collect your name and profile picture as provided by Google and authorized by you. Your password for email/password sign-up is handled securely by Firebase Authentication; we do not have access to your plaintext password.
Profile Information: Information you may provide in your user profile, such as your full name, GST registration status (isGstRegistered), and country code. We also store app usage limit information associated with your account, such as AI scan count (aiScanCount), total image upload count (totalImageUploadCount), their respective monthly reset timestamps, and your subscription status (isPro).
Financial Data and Receipt Images: When you use the smart scanning or manual entry features, you upload receipt images and input (or have AI assist in extracting) transaction details, including merchant name, amount, date, category, description, GST amount, tax-deductible status, and percentage. These images are uploaded to cloud storage, and the extracted data is stored and associated with your account. Such documents and data may include information related to third parties (e.g., your customers on sales invoices, or supplier details on expense receipts) as present on the documents you provide to the Service.
Budget Information: Budget categories (system-provided or custom, if applicable) and budget amounts you create.
Communications: When you contact us for support or provide feedback, such as through email to [email protected], we collect the content of your communications.
1.2. Information We Collect Automatically
Firebase Services Log Data: The backend services we use from Firebase (such as Authentication, Firestore, Cloud Storage, Remote Config) may automatically log operational information, which can include IP addresses, access times, and types of operations performed. This is primarily for service operation, security auditing, and diagnostic purposes.
Usage Information: We use Google Analytics for Firebase to collect information about how you interact with our Service (such as features used, screen views, and general usage patterns). This helps us understand user behavior and improve the app. This data is typically aggregated or pseudonymized. We do not use it to track your activity across different apps or websites for targeted advertising by third parties.
We do not actively collect precise geolocation data from your device unless a specific feature requiring it is introduced in the future and you provide explicit consent.
2. How We Use Your Information
We use the information we collect for various purposes, including to:
Provide, maintain, secure, and improve our Service (e.g., process your receipts andd invoices, generate reports and budgets).
Analyze receipt images using AI technology (e.g., Google Gemini via its SDK or Vertex AI) to extract text, classify transactions, and auto-fill information.
Manage your account, including your subscription status (future feature) and enforcing usage limits.
Send you service-related communications, such as account verification emails, important service updates, security alerts, and responses to your support requests and inquiries.
Monitor and analyze usage trends and activities to improve the functionality and user experience of our Service.
Monitor for and address activities that may violate our Terms of Service, or constitute abuse or misuse of our Service.
Comply with legal obligations and protect the rights, property, and safety of Wicare New Zealand Limited, our users, and others.
3. How We Share Your Information
We do not sell your personal information to third parties. We may share your information in the following circumstances:
Service Providers: We may share information with third-party vendors, consultants, and service providers who need access to such information to carry out work on our behalf. These include:
Google (Firebase / Google Cloud Platform): We use Google's services for backend infrastructure, including user authentication (Firebase Authentication), database (Cloud Firestore), file storage (Cloud Storage for Firebase), app analytics (Google Analytics for Firebase), remote configuration (Firebase Remote Config), and AI services (e.g., Gemini for receipt analysis). Receipt images are sent to Google's AI services for processing.
(Future) Payment and Subscription Processors (e.g., RevenueCat, Google Play Billing, Apple App Store): When you subscribe to paid services, your payment information will be processed by third-party payment processors. We will not store your full credit card information.
Legal Requirements: We may disclose your information if we believe in good faith that disclosure is necessary to (a) comply with relevant laws, regulations, legal processes, or governmental requests; (b) enforce our Terms of Service or other applicable policies; (c) protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others; and (d) protect, investigate, and deter against fraudulent, harmful, unauthorized, unethical, or illegal activity.
Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. We will make reasonable efforts to require the recipient to honor this Privacy Policy.
4. Data Storage and Security
Your data (including profile information, transaction details, budget information, and links to your receipt images) is primarily stored using Firebase Firestore. Your uploaded receipt images are stored using Cloud Storage for Firebase. These services are provided by Google Cloud Platform and utilize industry-standard security measures.
We take reasonable technical and organizational measures to help protect your personal information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. For example, data is encrypted in transit (HTTPS) and generally at rest by Firebase.
When we share information with third-party service providers as described in Section 3 (e.g., Google for AI processing), we take steps to ensure that data is transmitted securely (for example, via HTTPS), and we rely on the security measures implemented by these providers to protect your data during their processing and storage in accordance with their own privacy policies and security commitments.
However, no security system is impenetrable, and we cannot guarantee the absolute security of our systems or your data.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the Service. We may also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. You can request the deletion of your account and associated data by contacting us.
6. Your Rights and Choices
Depending on your jurisdiction, you may have certain rights regarding your personal information, including:
Access, Correction, or Deletion: You may review, update, correct, or request deletion of your account information at any time by accessing your account settings within the app (if available) or by contacting us.
Data Portability: You may have the right to request a copy of your personal information that we hold and to receive it in a structured, commonly used, and machine-readable format.
Withdraw Consent / Restrict Processing: Where we rely on your consent to process your information, you may withdraw that consent. You may also have the right to request restrictions on how we process your personal information.
Opt-out of Promotional Communications: If we send promotional emails in the future, you will be able to opt out by following the instructions in those messages. Even if you opt out, we may still send you non-promotional messages, such as those about your account or our ongoing business relations.
To exercise these rights, please contact us using the details provided below.
7. Children's Privacy
Our Service is not directed to children under the age of 16 (or the relevant minimum age in your jurisdiction), and we do not knowingly collect personal information from children under this age. If we learn that we have collected personal information from a child under this age, we will take steps to delete such information as quickly as possible.
8. International Data Transfers
Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the privacy laws may differ from those in your jurisdiction. If you are located outside New Zealand and choose to provide information to us, please note that we transfer the data, including personal data, to be processed by our service providers (like Google Cloud Firebase, which has servers in various locations) and potentially in New Zealand where our company is based. We will take steps to ensure that your data is treated securely and in accordance with this Privacy Policy.
9. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you as required by applicable law (e.g., by posting a notice within the Service or sending you an email). We encourage you to review this Privacy Policy periodically to stay informed about our information practices.
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Wicare New Zealand Limited
12 Bayfield Road
Anderson Bay, Dunedin 9013
New Zealand
Email: [email protected]